PRIVACY POLICY

Ventwise is a software-as-a-service platform providing building ventilation calculation tools based on Indian standards (SP 41, IS 7668:1989, IS 8837:1977, IS 10444:1983). The platform is operated from India and primarily serves users in India. All data processing described in this policy is carried out by Ventwise or its authorised sub-processors listed in Section 5.

For privacy-related matters, contact us at: quantxai@quantxai.com

2.1 Account Registration Data

When you register, we collect your full name, email address, and password. Your password is immediately secured using one-way cryptographic hashing before being written to our database. We never store or log your plain-text password. This data is necessary to create and manage your account.

2.2 Subscription and Payment Data

When you subscribe to a paid plan (Monthly at ₹250/month or Quarterly at ₹500/3 months), all payment processing is handled exclusively by Razorpay. We receive only the outcome of the transaction: your Razorpay subscription ID, payment ID, payment status, the plan tier selected, and the plan expiry date. We do not receive, store, or have access to your credit/debit card numbers, bank account details, CVV, UPI PIN, or any sensitive payment credentials. Razorpay's own privacy policy governs the data they collect during checkout.

2.3 Trial and Access Status

We record your account creation timestamp to calculate your 7-day free trial window. We store your selected plan tier (Monthly or Quarterly), your plan expiry date, and whether you currently have active platform access. These fields determine your ability to use the calculation modules.

2.4 Legal Acceptance Records

We maintain an auditable record of your acceptance of this Privacy Policy and our Terms of Conditions. For each document we store:

• Whether you accepted each document (Terms of Conditions and Privacy Policy)
• The exact date and time of your acceptance for each document
• The version number of the document you accepted

These records allow us to demonstrate compliance and to notify you when a new version requires re-acceptance.

2.5 Calculation Inputs

All ventilation calculations (heat flow by element, window area calculations, solar heat gain, airflow volumes, ACH-derived flow rates) are performed in real time in your browser or via our computation backend. We do not persistently store individual calculation inputs or results in our database — they exist only for the duration of your session.

2.6 Session Cookies

We use the following HTTP-only cookies to manage your authenticated session:

2.7 Analytics and Performance Data

We use Google Analytics 4 (GA4) and Vercel Analytics to understand how users interact with Ventwise. These tools collect anonymised data including: pages visited, time spent on each page, features used, approximate geographic location (country/region level), device type, browser type, and screen resolution. IP addresses collected by GA4 are anonymised before storage. Vercel Analytics does not use cookies and is privacy-friendly by design.

We also use Vercel Speed Insights to monitor page load performance and Core Web Vitals to ensure a fast experience.

We process your personal data on the following grounds under applicable data protection law:

• To create, verify, and maintain your Ventwise account
• To authenticate you on each visit using your session cookie
• To determine whether you have active access (trial or paid subscription) and gate platform features accordingly
• To create and verify Razorpay subscription orders and webhooks
• To send transactional communications (e.g., subscription confirmation, trial expiry reminders) to your registered email address
• To maintain auditable records of your legal document acceptance
• To detect unauthorised access attempts or account abuse
• To analyse aggregate, anonymised usage patterns to improve the platform

We do not use your data for marketing profiling, sell your data to third parties, or use your calculation inputs for training machine learning models.

We share data with the following sub-processors, each bound by their own data protection commitments, solely to provide the Service:

We do not engage any other sub-processors without updating this policy. We do not share your data with any advertising networks or data brokers.

• Password security: All passwords are secured with one-way cryptographic hashing before storage. Plain-text passwords are never written to disk or logs.
• HTTP-only cookies: Session cookies are HTTP-only and inaccessible to client-side JavaScript, reducing XSS risk.
• HTTPS everywhere: All data in transit is encrypted via TLS 1.2 or higher. We enforce HTTPS-only access.
• Database encryption: MongoDB Atlas encrypts all data at rest using AES-256.
• Minimal data: We do not store calculation inputs, card numbers, or UPI credentials.

Despite these measures, no internet-based system can guarantee absolute security. If you believe your account has been compromised, please contact us immediately at quantxai@quantxai.com.

You have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data (e.g., your registered name).
• Right to erasure: Request deletion of your account and all associated personal data. Note that financial records required by law will be retained per Section 7.
• Right to data portability: Request your account data in a machine-readable format (JSON).
• Right to object: Object to processing of your data for analytics purposes. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

To exercise any of these rights, email quantxai@quantxai.com from your registered email address. We will respond within 30 days.

Ventwise uses a minimal cookie footprint. We do not use advertising cookies or cross-site tracking pixels.

Ventwise is a professional tool intended for adults aged 18 and above, specifically architects, engineers, and building professionals. We do not knowingly collect data from persons under 18. If you believe a minor has registered without parental consent, contact us at quantxai@quantxai.com and we will delete the account promptly.

We may update this Privacy Policy to reflect changes in the platform, applicable law, or our data practices. When we do:

• We increment the version number displayed at the top of this page.
• On your next login, you will be redirected to an acceptance page and prompted to review and accept the updated policy before regaining calculator access.
• Material changes will be highlighted in the acceptance notice.

Your continued use of Ventwise after accepting an updated Privacy Policy constitutes your agreement to the revised terms.

For privacy queries, data requests, or complaints, please contact:

If you are dissatisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.